Small business security needs
Your business data can be compromised in many ways. You and your users can compromise your organization’s security when you sign in with compromised credentials or view organization data on different devices and applications. More specifically, your organization is at risk from:

• Compromised or weak sign-in credentials.
• Compromised device with a weak pin, or a user owned device.
• Users who can copy/paste/save your organization’s data to personal apps.
• Users who install and use third-party apps with weak security.
• Email vulnerabilities, including sharing sensitive data, phishing attempts, malware, and so on.
• When people who should not, can access documents with sensitive information.

Microsoft 365 Business Premium helps safeguard your data in each of these instances. The security features that protect your business data are detailed in the following figure.

How your data and devices are protected

Microsoft 365 Business Premium helps defended against threats by:

• Scanning links in emails and documents in real time to block unsafe web sites (ATP Safe Links).
• Performing advanced analysis of email attachments in a sandbox environment to detect newly developed malware (ATP Safe Attachments).
• Enabling anti-phishing policies that use machine learning models and impersonation detection to provide protection against advanced attacks (ATP anti-phishing intelligence).
• Setting up advanced policies that disable access from untrusted locations or bypass multifactor authentication from trusted places such as your office network (Azure MFA including trusted IPs, and Conditional Access).
• Enforcing malware protection across all your organization’s Windows 10 devices and protecting files in key system folders from changes made by ransomware (Windows Defender)

Your business data is protected by:

• Using automatic detection to help prevent sensitive information such as Social Security numbers or credit cards from leaking outside your business (data loss prevention).
• Encrypting sensitive emails so you can communicate securely with customers or other people outside your organization. This ensures that only the intended recipient can read the message (Office 365 Message Encryption).
• Controlling who has access to company information by applying restrictions such as Do Not Copy and Do Not Forward to email and documents (Azure Information Protection, Plan 1).
• Enabling unlimited cloud archiving so you can retain all your organization’s email, including the mailboxes of former employees (Exchange Online Archiving).

Your devices are secured by:

• Controlling which devices and users can access your Microsoft data, with options to block users from signing in from home computers, unapproved apps, or outside of work hours (Conditional Access).
• Applying security policies to protect business data on iOS and Android devices. For example, you can require users to provide a PIN or fingerprint to access business data, and encrypt data on mobile devices (App protection for Office mobile apps).
• Keeping business documents, emails, and other data within approved Office mobile apps and preventing employees from saving these to unauthorized apps and locations (App protection for Office mobile apps).
• Remotely wiping business data from lost or stolen devices without affecting personal information (Intune selective wipe).
• Using simplified controls to manage policies for all the Windows 10 PCs in your company, enforcing BitLocker encryption and automatically installing critical Windows updates (Enforce Windows update policies).

For more information on Microsoft 365, please contact us.